Lucene search
K

6 matches found

VulnCheck KEV
VulnCheck KEV
added 2026/02/20 12:0 a.m.11 views

VulnCheck KEV: CVE-2025-14528

A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...

7.5CVSS5.4AI score0.03559EPSS
In wildExploits1References3
NVD
NVD
added 2025/12/11 5:15 p.m.9 views

CVE-2025-14528

A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...

7.5CVSS0.03559EPSS
Exploits1References6
OSV
OSV
added 2025/12/11 5:15 p.m.5 views

CVE-2025-14528

A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...

7.5CVSS5.4AI score0.03559EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/11 5:2 p.m.2 views

CVE-2025-14528 D-Link DIR-803 Configuration getcfg.php information disclosure

A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...

6.9CVSS6.1AI score0.03559EPSS
Exploits1References6
CVE
CVE
added 2025/12/11 5:2 p.m.28 views

CVE-2025-14528

The CVE-2025-14528 issue affects D-Link DIR-803 routers (firmware up to 1.04, A1 era). A vulnerability in the Configuration Handler’s /getcfg.php allows manipulation of the AUTHORIZED_GROUP parameter via newline injection, resulting in an authentication bypass and exposure of administrator creden...

7.5CVSS5.1AI score0.03559EPSS
In wildExploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.10 views

PT-2025-50639

Name of the Vulnerable Software and Affected Versions D-Link DIR-803 versions prior to 1.05 Description A flaw exists in D-Link DIR-803, potentially leading to information disclosure. The issue resides within the Configuration Handler component, specifically in the /getcfg.php file. Manipulation ...

7.5CVSS5.8AI score0.03559EPSS
Exploits1References13
Rows per page
Query Builder